JustEmails
Start free trial
Legal

Law Enforcement Guidelines

We host email, so we hold data that governments sometimes want. This page explains what legal process we require before disclosing anything, when we tell the affected customer, and how long we keep data in the first place.

Effective Last reviewed

1. Our position

We disclose customer data only where we are legally compelled, or where there is a genuine emergency involving a risk of death or serious physical injury. We do not provide voluntary access to customer mailboxes.

Requests are reviewed individually. We reject those that are overbroad, legally defective, or not properly served, and we ask for them to be narrowed or reissued.

2. What legal process is required

We are a US entity (Velocity Digital Labs LLC, Delaware). The process we require scales with how sensitive the data is:

  • Subpoena — basic subscriber information: the name and email address on the account, account creation date, billing contact, and the domains registered to the account.
  • Court order — non-content records: login timestamps and IP addresses, message headers and metadata such as sender, recipient and time, but not message bodies.
  • Search warrant — message content, attachments, and drafts. Nothing less than a warrant will obtain the contents of a mailbox.

Requests from outside the United States should be made through a Mutual Legal Assistance Treaty, letter rogatory, or another recognised channel. We are not able to act on a foreign order that has not been domesticated.

3. We tell the customer

Our default is to notify the affected customer before disclosing anything, with a copy of the request, so they have the opportunity to object or seek to quash it.

We will delay notice only where we are legally prohibited from giving it, such as under a valid non-disclosure order, or where notice would create a risk to someone’s safety. Where an order to delay expires, we notify the customer then.

4. Emergency requests

Where a request involves an imminent risk of death or serious physical injury, send it to legal@justemails.app with “EMERGENCY” in the subject, from an official government address, describing the nature of the emergency and the specific data needed.

We will assess it in good faith and promptly. An emergency request is narrower than a warrant by nature, and we disclose only what is necessary to address the emergency.

5. What we hold, and for how long

We cannot produce what we do not have. These are the actual retention periods, which match the automated deletion running in our systems:

  • Message content and attachments — for as long as the subscription is active. Deleted mail is removed from trash and from object storage after 30 days, and is not recoverable after that.
  • Account data — for the subscription, plus 30 days after termination to allow export.
  • Server logs — up to 90 days.
  • Billing records — up to 7 years, as tax and accounting law requires.

We do not maintain historical archives beyond these periods, and we do not keep copies of mail a customer has deleted in order to satisfy future requests.

6. Preservation requests

We will honour a valid preservation request under 18 U.S.C. § 2703(f), preserving a snapshot of the specified account for 90 days, extendable once on request. Preservation does not disclose anything — appropriate legal process is still required for that.

7. How to serve a request

Send requests to legal@justemails.app, or by post to:

Velocity Digital Labs LLC
131 Continental Dr, Suite 305
Newark, DE 19713
United States

Include the specific account identifier — the account email address or the domain name — the precise records sought, and the relevant date range. A request identifying no account, or asking for “all records”, cannot be actioned and will be returned.

We do not accept service of legal process through our support channels.

8. Costs and transparency

We may seek reimbursement of reasonable costs of responding, where the law allows it.

We intend to publish a periodic transparency report covering the number of requests received and how many we complied with. To be straight with you: we have not published one yet, and we would rather say that than imply a practice we have not started.

9. Related